NightLedger is a Windows backdoor used by Nimbus Manticore, as detailed in a Kaspersky report. It is used to maintain persistent access to compromised hosts, often in attacks targeting entities in the Middle East, Africa, and South Asia. It is part of a toolset that includes custom WebSocket tunnelers.